Swiss Data Protector Launches Probe After Hack Exposes Pension Fund Customer Data
The Swiss data protection authority opened an investigation after a cyberattack on PK Softech leaked personal data from several pension providers, including the federal pension fund Publica.
At the close of September, hackers infiltrated PK Softech, the software supplier for several Swiss pension institutions, and extracted personal data of insured individuals, potentially including former federal councilors. Affected entities comprise the federal pension fund Publica as well as the pension schemes of Migros, Post and the city of Zürich. In response, the Eidgenössische Datenschutz- und Öffentlichkeitsbeauftragte (EDÖB) announced a comprehensive investigation to map the scope of data transferred to PK Softech and to assess the volume of information that left the system.
The federal administration has classified the attack as “grave,” anticipating significant damage, while the Federal Prosecutor’s Office has opened a criminal investigation. Authorities also warn that the stolen data could be cross-checked with immigration lists, exposing foreign intelligence personnel. The probe aims to clarify legal responsibilities and prevent future breaches.
Why it matters
It reveals vulnerabilities in systems handling sensitive pension data, risking privacy and national security.
In this story
